Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/35FB2948E25511EC97CBD93BC4F9AE02.roa
File:                     35FB2948E25511EC97CBD93BC4F9AE02.roa (raw, json)
Hash identifier:          L5GbFhNvWpULaCqO20OVK99KTpgnRDqTHfItgyrHXWI=
Subject key identifier:   3B:32:03:6D:62:C9:BD:90:C9:00:E8:3E:CB:1B:08:C2:A2:A8:6E:3D
Certificate issuer:       /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial:       1486
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/35FB2948E25511EC97CBD93BC4F9AE02.roa
Signing time:             Fri 03 Jun 2022 06:20:50 +0000
ROA not before:           Fri 03 Jun 2022 06:20:50 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     17639
IP address blocks:        27.49.0.0/16 maxlen: 16
                          27.49.0.0/22 maxlen: 22
                          27.49.4.0/22 maxlen: 22
                          27.49.8.0/22 maxlen: 22
                          27.49.12.0/22 maxlen: 22
                          27.49.16.0/22 maxlen: 22
                          27.49.20.0/22 maxlen: 22
                          27.49.24.0/22 maxlen: 22
                          27.49.28.0/22 maxlen: 22
                          27.49.32.0/22 maxlen: 22
                          27.49.36.0/22 maxlen: 22
                          27.49.40.0/22 maxlen: 22
                          27.49.44.0/22 maxlen: 22
                          27.49.48.0/22 maxlen: 22
                          27.49.52.0/22 maxlen: 22
                          27.49.56.0/22 maxlen: 22
                          27.49.60.0/22 maxlen: 22
                          27.49.64.0/22 maxlen: 22
                          27.49.68.0/22 maxlen: 22
                          27.49.72.0/22 maxlen: 22
                          27.49.76.0/22 maxlen: 22
                          27.49.80.0/22 maxlen: 22
                          27.49.84.0/22 maxlen: 22
                          27.49.88.0/22 maxlen: 22
                          27.49.92.0/22 maxlen: 22
                          27.49.96.0/22 maxlen: 22
                          27.49.100.0/22 maxlen: 22
                          27.49.104.0/22 maxlen: 22
                          27.49.108.0/22 maxlen: 22
                          27.49.112.0/22 maxlen: 22
                          27.49.116.0/22 maxlen: 22
                          27.49.120.0/22 maxlen: 22
                          27.49.124.0/22 maxlen: 22
                          27.49.128.0/22 maxlen: 22
                          27.49.132.0/22 maxlen: 22
                          27.49.136.0/22 maxlen: 22
                          27.49.140.0/22 maxlen: 22
                          27.49.144.0/22 maxlen: 22
                          27.49.148.0/22 maxlen: 22
                          27.49.152.0/22 maxlen: 22
                          27.49.156.0/22 maxlen: 22
                          27.49.160.0/22 maxlen: 22
                          27.49.164.0/22 maxlen: 22
                          27.49.168.0/22 maxlen: 22
                          27.49.172.0/22 maxlen: 22
                          27.49.176.0/22 maxlen: 22
                          27.49.180.0/22 maxlen: 22
                          27.49.184.0/22 maxlen: 22
                          27.49.188.0/22 maxlen: 22
                          27.49.192.0/22 maxlen: 22
                          27.49.196.0/22 maxlen: 22
                          27.49.200.0/22 maxlen: 22
                          27.49.204.0/22 maxlen: 22
                          27.49.208.0/22 maxlen: 22
                          27.49.212.0/22 maxlen: 22
                          27.49.216.0/22 maxlen: 22
                          27.49.220.0/22 maxlen: 22
                          27.49.224.0/19 maxlen: 19
                          27.49.224.0/20 maxlen: 20
                          27.49.224.0/21 maxlen: 22
                          27.49.232.0/22 maxlen: 22
                          27.49.236.0/22 maxlen: 22
                          27.49.240.0/22 maxlen: 22
                          27.49.244.0/22 maxlen: 22
                          27.49.248.0/22 maxlen: 22
                          27.49.252.0/22 maxlen: 22
                          103.240.120.0/22 maxlen: 22
                          113.19.0.0/16 maxlen: 16
                          113.19.0.0/22 maxlen: 22
                          113.19.4.0/22 maxlen: 22
                          113.19.8.0/22 maxlen: 22
                          113.19.12.0/22 maxlen: 22
                          113.19.16.0/22 maxlen: 22
                          113.19.20.0/22 maxlen: 22
                          113.19.24.0/22 maxlen: 22
                          113.19.28.0/22 maxlen: 22
                          113.19.32.0/22 maxlen: 22
                          113.19.36.0/22 maxlen: 22
                          113.19.40.0/22 maxlen: 22
                          113.19.44.0/22 maxlen: 22
                          113.19.48.0/22 maxlen: 22
                          113.19.52.0/22 maxlen: 22
                          113.19.56.0/22 maxlen: 22
                          113.19.60.0/22 maxlen: 22
                          113.19.64.0/22 maxlen: 22
                          113.19.68.0/22 maxlen: 22
                          113.19.72.0/22 maxlen: 22
                          113.19.76.0/22 maxlen: 22
                          113.19.80.0/22 maxlen: 22
                          113.19.84.0/22 maxlen: 22
                          113.19.88.0/22 maxlen: 22
                          113.19.92.0/22 maxlen: 22
                          113.19.96.0/22 maxlen: 22
                          113.19.100.0/22 maxlen: 22
                          113.19.104.0/22 maxlen: 22
                          113.19.108.0/22 maxlen: 22
                          113.19.112.0/22 maxlen: 22
                          113.19.116.0/22 maxlen: 22
                          113.19.120.0/22 maxlen: 22
                          113.19.124.0/22 maxlen: 22
                          113.19.128.0/22 maxlen: 22
                          113.19.132.0/22 maxlen: 22
                          113.19.136.0/22 maxlen: 22
                          113.19.140.0/22 maxlen: 22
                          113.19.144.0/22 maxlen: 22
                          113.19.148.0/22 maxlen: 22
                          113.19.152.0/22 maxlen: 22
                          113.19.156.0/22 maxlen: 22
                          113.19.160.0/22 maxlen: 22
                          113.19.164.0/22 maxlen: 22
                          113.19.168.0/22 maxlen: 22
                          113.19.172.0/22 maxlen: 22
                          113.19.176.0/22 maxlen: 22
                          113.19.180.0/22 maxlen: 22
                          113.19.184.0/22 maxlen: 22
                          113.19.188.0/22 maxlen: 22
                          113.19.192.0/22 maxlen: 22
                          113.19.196.0/22 maxlen: 22
                          113.19.200.0/22 maxlen: 22
                          113.19.204.0/22 maxlen: 22
                          113.19.208.0/22 maxlen: 22
                          113.19.212.0/22 maxlen: 22
                          113.19.216.0/22 maxlen: 22
                          113.19.220.0/22 maxlen: 22
                          113.19.224.0/22 maxlen: 22
                          113.19.228.0/22 maxlen: 22
                          113.19.232.0/22 maxlen: 22
                          113.19.236.0/22 maxlen: 22
                          113.19.240.0/22 maxlen: 22
                          113.19.244.0/22 maxlen: 22
                          113.19.248.0/22 maxlen: 22
                          113.19.252.0/22 maxlen: 22
                          136.158.128.0/17 maxlen: 17
                          136.158.128.0/22 maxlen: 22
                          136.158.132.0/22 maxlen: 22
                          136.158.136.0/22 maxlen: 22
                          136.158.140.0/22 maxlen: 22
                          136.158.144.0/22 maxlen: 22
                          136.158.148.0/22 maxlen: 22
                          136.158.152.0/22 maxlen: 22
                          136.158.156.0/22 maxlen: 22
                          136.158.160.0/22 maxlen: 22
                          136.158.164.0/22 maxlen: 22
                          136.158.168.0/22 maxlen: 22
                          136.158.172.0/22 maxlen: 22
                          136.158.176.0/22 maxlen: 22
                          136.158.180.0/22 maxlen: 22
                          136.158.184.0/22 maxlen: 22
                          136.158.188.0/22 maxlen: 22
                          136.158.192.0/22 maxlen: 22
                          136.158.196.0/22 maxlen: 22
                          136.158.200.0/22 maxlen: 22
                          136.158.204.0/22 maxlen: 22
                          136.158.208.0/22 maxlen: 22
                          136.158.212.0/22 maxlen: 22
                          136.158.216.0/22 maxlen: 22
                          136.158.220.0/22 maxlen: 22
                          136.158.224.0/22 maxlen: 22
                          136.158.228.0/22 maxlen: 22
                          136.158.232.0/22 maxlen: 22
                          136.158.236.0/22 maxlen: 22
                          136.158.240.0/22 maxlen: 22
                          136.158.244.0/22 maxlen: 22
                          136.158.248.0/22 maxlen: 22
                          136.158.252.0/22 maxlen: 22
                          223.130.16.0/22 maxlen: 22
                          2403:4c0::/32 maxlen: 32
                          2403:4c0:8000::/34 maxlen: 34
                          2403:4c0:c000::/34 maxlen: 34

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5254 (0x1486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
        Validity
            Not Before: Jun  3 06:20:50 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=6299a841-7045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:0b:58:24:c1:a6:09:3f:ad:00:a5:b2:0c:
                    c2:f1:ab:37:94:73:ef:ca:95:5a:a3:62:c0:73:0f:
                    df:53:f3:6b:cc:c0:3c:42:56:e7:2c:bb:87:6e:74:
                    05:f2:43:e9:24:9b:ea:68:73:e8:1e:77:bd:88:96:
                    35:33:ae:92:f9:38:52:41:db:fc:0d:1e:76:14:92:
                    a7:5d:3e:5e:32:04:89:0a:41:9a:25:1c:89:00:38:
                    85:fb:b6:1f:a6:3b:73:3d:96:bf:c3:f3:40:d3:45:
                    3f:32:d8:5c:d2:82:c6:ee:e2:6a:f0:eb:13:1d:d5:
                    04:14:53:b3:40:1b:08:eb:e6:7d:c6:1e:e3:eb:01:
                    25:af:c1:07:76:15:bf:8e:b9:3e:c6:d9:23:c6:72:
                    e8:26:d9:14:75:a2:e0:25:09:bb:9f:d4:16:bf:f3:
                    9c:d0:74:54:af:6d:f2:b2:d1:af:0e:7d:86:84:fd:
                    4d:8c:39:58:3a:98:51:76:f0:28:65:5d:d1:7f:72:
                    da:0c:79:68:63:ee:4c:81:82:13:fb:1c:90:3b:7c:
                    ed:7c:4c:f2:c4:6c:5f:af:1c:d3:65:96:46:28:d2:
                    cd:97:2f:98:f7:13:ae:a4:d8:ec:a7:e9:0c:2b:b9:
                    2f:2e:9a:58:21:63:b1:91:55:c8:d6:64:6c:6e:11:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:32:03:6D:62:C9:BD:90:C9:00:E8:3E:CB:1B:08:C2:A2:A8:6E:3D
            X509v3 Authority Key Identifier:
                keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/35FB2948E25511EC97CBD93BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.49.0.0/16
                  103.240.120.0/22
                  113.19.0.0/16
                  136.158.128.0/17
                  223.130.16.0/22
                IPv6:
                  2403:4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:68:73:05:99:1a:41:ae:53:91:2d:89:ef:49:5b:b2:f9:df:
         77:87:47:e4:fc:45:64:49:c5:a1:e3:0b:b7:ac:bd:40:6b:20:
         26:8c:3b:d9:df:e8:04:35:6e:f7:52:be:1c:1d:ce:a7:70:46:
         09:6c:83:b6:4b:2b:f7:75:ad:0f:4b:40:2e:6f:05:44:42:9f:
         b4:3a:91:ab:99:21:c9:64:6f:97:84:d6:12:12:4d:5a:d9:a9:
         5d:06:6e:97:f2:ec:6e:83:f0:57:f7:a0:47:fb:a9:55:ca:fc:
         1a:8b:99:6d:e4:a3:2d:7c:ae:4e:45:5b:2e:dc:f4:6b:ff:e0:
         a3:d9:2d:c4:3a:90:f3:65:5c:14:2f:0d:56:ff:51:12:50:96:
         f8:83:47:43:53:df:a9:22:cb:fa:2c:ed:d9:6b:32:9e:83:2d:
         4c:5b:be:f7:44:39:f6:85:20:da:d3:66:89:4b:6f:0d:2f:6d:
         44:b7:9b:79:5e:6e:a5:01:1c:b3:ea:0b:5b:5f:a9:ea:e0:bd:
         52:6f:3e:4b:6d:4a:4a:0a:6f:c0:87:49:18:6d:fb:82:e6:50:
         28:28:af:e0:60:be:61:01:47:a7:0b:41:d3:b3:b0:15:56:2d:
         48:4c:c3:a1:72:2d:b1:f3:26:56:11:8b:ed:ed:90:49:06:61:
         ee:b1:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org